topic Re: FMC Sandbox API - No Devices & Authorization Error in DevNet Sandbox

FMC Sandbox API - No Devices & Authorization Error

mdusman — Thu, 13 Feb 2025 15:13:33 GMT

I am using the Cisco FMC Sandbox API Explorer on the Always-On Sandbox (Sandbox URL), but I am experiencing issues when querying device records and checking task statuses.

API Calls & Errors:

1️⃣ Checking Device Registration Status:

GET {{protocol}}://{{hostname}}/api/fmc_config/v1/domain/{{domain_id}}/job/taskstatuses/{{device_registration_task_id}}

Response:

{
    "error": {
        "category": "FRAMEWORK",
        "messages": [
            {
                "description": "The user is not authorized"
            }
        ],
        "severity": "ERROR"
    }
}

Issue: I am receiving an authorization error, even though I am using the API Explorer with the correct credentials.

2️⃣ Checking Registered Devices:

GET {{protocol}}://{{hostname}}/api/fmc_config/v1/domain/{{domain_id}}/devices/devicerecords?expanded=True

Response:

{
  "links": {},
  "paging": {
    "offset": 0,
    "limit": 0,
    "count": 0,
    "pages": 0
  }
}

Issue: The response is empty, even though the sandbox is supposed to have two Firepower Threat Defense (FTD) sensors preconfigured.

Questions:

Why am I getting an "Unauthorized" error when checking task statuses?
- Do I need additional permissions, or is this a known limitation of the Always-On Sandbox?
Why are no devices appearing when querying devices/devicerecords?
- Is there an issue with the current sandbox environment, or should I reserve a new instance?

Any guidance on troubleshooting this would be greatly appreciated. Thanks in advance!

Re: FMC Sandbox API - No Devices & Authorization Error

bigevilbeard — Thu, 13 Feb 2025 16:09:20 GMT

@mdusman did you generate a token? https://<management_center_IP_or_name>/api/fmc_platform/v1/auth/generatetoken.

Re: FMC Sandbox API - No Devices & Authorization Error

mdusman — Thu, 13 Feb 2025 16:32:56 GMT

Hi @bigevilbeard , thanks for the response.

Yes I have. Getting Access Policies worked fine but Other than Devices returns empty and registration status task endpoint also giving User not authorized issue.

Re: FMC Sandbox API - No Devices & Authorization Error

bigevilbeard — Thu, 13 Feb 2025 16:38:22 GMT

@mdusman just tested also, reply back is the same, i tried to get the tasks also.... as well as your first call same error as below.

python fmc_task_lists.py Authentication successful! Access token and domain UUID retrieved. Access Token: 45b2df3e-6457-4061-880a-5df948338c04 Domain UUID: e276abec-e0f2-11e3-8169-6d9ed49b625f Failed to retrieve tasks. Status code: 403 {"error":{"category":"FRAMEWORK","messages":[{"description":"The user is not authorized"}],"severity":"ERROR"}}

Getting the devices

✦ ❯ python fmc_devices.py Authentication successful! Access token and domain UUID retrieved. Access Token: f0dd0eb7-f2e8-4248-851b-4c700dba92c0 Domain UUID: e276abec-e0f2-11e3-8169-6d9ed49b625f Device records retrieved successfully! {'links': {}, 'paging': {'offset': 0, 'limit': 0, 'count': 0, 'pages': 0}}

I saw a pop up in the UI which said 'no devices attached' i cannot recall how i saw this tho, it flashed up. Guess team will need to advise here.

Re: FMC Sandbox API - No Devices & Authorization Error

mdusman — Thu, 13 Feb 2025 16:54:18 GMT

Did you try Devices endpoint on Sandbox environment?

Re: FMC Sandbox API - No Devices & Authorization Error

bigevilbeard — Thu, 13 Feb 2025 16:56:45 GMT

@mdusman Checking Device Registration Status? Yes same error as you.

Re: FMC Sandbox API - No Devices & Authorization Error

mdusman — Thu, 13 Feb 2025 17:03:21 GMT

Thanks for the feedback @bigevilbeard , can I contact support for this?

Re: FMC Sandbox API - No Devices & Authorization Error

bigevilbeard — Fri, 14 Feb 2025 09:58:00 GMT

@mdusman the Devnet team monitor this space, it’s Cisco Live this week so they might be busy keeping the lights on for the sandbox there. I’m sure they will pick this up

Re: FMC Sandbox API - No Devices & Authorization Error

mdusman — Sat, 15 Feb 2025 15:30:34 GMT

Okay, Thanks for the response. Have a good weekend